13–14 November 2026 / UWA Business School
We acknowledge the Whadjuk Noongar people, Traditional Custodians of the land we’re meeting on today, and pay our respects to Elders past and present.
You’re probably here: Wesfarmers, G91
Talks, live on stage.
Keep it quiet for the speakers and pop your phone on silent.
Next door
The same talks, live on the big screen. Chat, hack, take a call, or bring the kids.
Find anyone in a yellow crew shirt, or the rego desk out front.
Tell the nearest crew member and we’ll come to you.
Leave by the nearest exit and follow UWA wardens and our crew.
Wear your lanyard all day. It’s your ticket in, both days.
Capture the flag
Form a team of up to four, beginners and veterans alike.
Run by Emu Exploit. Scan to join, or head to ctf.emu.team.
Winners announced at Saturday’s closing ceremony.
Full code of conduct: bsidesperth.com.au/code-of-conduct.html
Teams of up to four. Prizes for the top three and a trophy for the winners, announced at Saturday’s close.
Learn to pick locks with CyberCX. Beginners very welcome.
Solder up your badge, just outside the back doors.
Shirts and goodies from past years at the rego desk. Pay by card with a QR code.
Brewed all day by Margaret River Roasting.
On us, thanks to elttam.
rok kombucha and Waves & Caves, from The Local Drinks Co.
Grab a refill whenever you need one.
Hardware and exploitation
| 9:00 | Welcome and opening | |
| 9:20 | AC/DC/RCE: From Bluetooth to Contactor | Brendan Scarvell |
| 10:10 | I Built a Tiny Passkey Authenticator, Then Had to Explain Why You Shouldn’t Trust It | George Coldham |
| 10:40 | Morning tea | |
| 11:00 | Go Foot, Meet Gun: Auditing the Go Ecosystem for Its Sharpest Edges | Zoltan Madarassy & Alex Brown |
| 11:50 | Springing Cats Together: Chaining Intended Behaviours into RCE | Chris Elliott |
| 12:20 | Lunch | |
| 1:20 | Dumpster Diving for AI Agent Data Leaks | Alexander Wilczek |
| 1:55 | To be announced | |
| 2:30 | The Ghosts of Protocols Past | Danielle Rosenfeld-Lovell |
| 3:00 | Viral Vulnerabilities: Unpacking Copy.Fail and Related Linux Kernel Bugs | Angus (InfoSect) |
| 3:50 | AI Security Q&A | Cole Cornford |
| 4:20 | Day 1 wrap-up |
Threat intel, defence and AI
| 9:00 | Day 2 opening | |
| 9:15 | Who is Igor Gilmutdinov? Using OSINT to Uncover the People Behind Russian Bulletproof Hosting | Rich S |
| 10:05 | Nobody’s Protocol: Attacking TACACS+ in 2026 | Matt Jones |
| 10:50 | Morning tea | |
| 11:10 | Purple Teaming yo ICS | Bruce ‘BFL’ Large |
| 11:55 | Lunch | |
| 12:55 | A Leukocyte For Supply Chain Attacks | Adam Brickhill |
| 1:40 | The Enemy Within: Running Untrusted Code Through AI Workloads | Kumar Soorya & Kaif Ahsan |
| 2:25 | A Fool’s Paradise: AI vs Humans | PS Sides (Year 6 students) |
| 2:40 | Closing ceremony, prizes and CTF results |
Scan for every talk, both days, with times and speakers.
bsidesperth.com.au/schedule
BSides Perth runs at cost. They’re why your ticket stays cheap.







Tag @BSidesPer on X and BSides Perth on LinkedIn. Speakers and sponsors love a shout-out.
We’ll be back shortly. Time now:
Thanks to elttam. Talks pick up again after lunch. Time now:
Talks start again at 9:00 tomorrow.
Keep your lanyard. You’ll need it to get back in.
Day 2 / Saturday 14 November
To our speakers, sponsors, crew and every one of you. See you at BSides Perth 2027.
| → Space PgDn or click | Next slide |
| ← PgUp | Previous slide |
| G | Jump to any slide |
| B | Break slide (with clock) |
| S | Sponsor slides |
| L | Loop: auto-cycle welcome, rooms, conduct and sponsors every 12 s |
| F | Full screen |
| Home End | First / last slide |
| Esc | Close this panel |